Privacy Policy

1. About us

Amato's Liquor Mart (trading name) operates from Shop 2, 267–277 Norton Street, Leichhardt NSW 2040. We sell alcohol, packaged food, and related products both in-store and online, and we host events throughout the year.

This policy applies to personal information we collect through:

• our event ticketing website at events.amatos.com.au, where you can reserve seats for our events;
• our online store at amatos.com.au, where you can purchase alcohol, packaged food, and related products for delivery across Australia; and
• any other interactions you have with us, including by telephone, email, or in-store.

When we say "we", "us", or "our" in this policy, we mean Amato's Liquor Mart. When we say "you" or "your", we mean any individual whose personal information we collect.

2. What personal information we collect

Event bookings (events.amatos.com.au)

• guest names and age confirmations (as required by NSW liquor licensing);
• your dietary preferences, where you choose to provide them;
• your contact details for the person making the booking (name, email, and phone number);
• your marketing preference (opt-in only, unchecked by default); and
• payment and transaction details (processed by Stripe — card numbers are handled entirely by Stripe and never touch our systems).

Online store (amatos.com.au)

When you shop with us through our online store, we may collect:

• your name, email address, and phone number;
• your delivery address and postcode;
• age verification confirmation (you must be 18 or older to purchase alcohol);
• your order and purchase history;
• payment information (handled by our payment provider — card details are not stored by us); and
• any other information you provide when you contact us about an order.

Amato's Rewards program

If you join our Amato's Rewards loyalty program (in-store or online), we may also collect:

• your date of birth (to provide birthday specials);
• your purchase history and product preferences (to personalise your rewards experience and tailor member-only offers); and
• your rewards program activity (points earned, redeemed, and account status).

In-store and other interactions

When you contact us by phone, email, or visit our store, we may collect your name and contact details in order to respond to your enquiry or provide our services.

3. How we collect your information

We collect personal information in the following ways:

• Directly from you — through online forms on our websites, by email, by phone, or in-store (including paper sign-up forms, tablet, QR code, or verbally via staff).
• Through our payment provider (Stripe) — when you pay by card, you are redirected to Stripe's hosted checkout page. Stripe collects your card details directly. We never receive or store your card number - we receive only a payment reference and confirmation status.
• From a third party acting on your behalf — if someone else makes a booking on your behalf, they may provide your details as part of that booking. This is permitted under APP 3.6 where it is impracticable to collect from each individual directly.

In-store and event sign-ups

When you sign up in-store or at an event, there are two separate opt-ins available to you:

1. Mailing list — to receive event invitations, newsletters, and promotions (managed via Mailchimp). We will only add you to our mailing list with your explicit consent.
2. Amato's Rewards membership — our loyalty program, which involves the collection of additional personal information as described in Section 2.

You can opt into one without the other. Each requires its own consent.

Cookies and tracking

Our websites do not use cookies for tracking or analytics. Booking information is held temporarily in your browser's session storage during the checkout process and is cleared after your order is confirmed.

Our websites load resources from third-party services (such as Google Fonts and Stripe) which may set their own cookies or collect technical data such as your IP address. Please refer to those providers' privacy policies for details.

4. Why we collect your information

We collect and use personal information for the following purposes:

• Processing and confirming your bookings or orders
• Age verification as required by NSW liquor licensing laws
• Event catering (where dietary preferences are provided)
• Sending booking or order confirmations and operational communications
• Sending payment reminders for pending event bookings and cancellation notifications where payment has not been received
• Processing payments through our payment provider
• Administering prize draws associated with event bookings, including calculating draw entries, recording eligibility, and contacting winners
• Marketing communications (only when you have actively opted in)
• Order fulfilment and delivery for our online store
• Administering the Amato's Rewards program, including tracking points, personalising offers based on your purchase history and preferences, and providing birthday specials
• Meeting our legal and licensing obligations

5. Sensitive information

Information that could reveal health-related or religious details (for example, dietary preferences for event catering). Under the Australian Privacy Principles, this is considered sensitive information.

We only collect sensitive information when you provide it voluntarily, and solely for event catering purposes. By providing this information, you consent to its collection for that purpose.

Sensitive information is not used for marketing, shared with our marketing platform, or used for any purpose other than catering for the event you are attending.

6. What happens if you don't provide your information

We give you the option of not identifying yourself where it is lawful and practical.

However, if you don't provide your personal information, we may not be able to give you the service you want. For example:

• We need your contact details and age verification to process and confirm your order. Without these, we cannot complete it.
• We are required by law to verify that attendees are aged 18 or over for events involving alcohol service.
• For event bookings, if you choose not to provide dietary preferences, we may not be able to cater to your specific requirements.
• If you join Amato's Rewards but do not provide your date of birth, we will not be able to send you birthday specials.
• Marketing communications are entirely optional — you will only receive them if you actively opt in.

7. Who we share your information with

We may share your personal information with the following third parties:

We may also share personal information with other service providers who help us operate our business (for example, delivery and logistics partners for our online store, or IT service providers), and where required by law or regulation.

When we share information with third parties, we take reasonable steps to ensure they handle it safely and consistently with Australian privacy laws.

You can find the privacy policies of our third-party service providers here:

• Stripe Privacy Policy
• Mailchimp (Intuit) Privacy Statement
• Google Privacy Policy

8. Overseas transfers

Some of our service providers are based outside Australia. Your personal information may be transferred to and processed in the following countries:

For Stripe and Google, we take reasonable steps to ensure they handle your personal information in accordance with the Australian Privacy Principles.

9. Direct marketing

We only use your personal information for direct marketing when you have given us your explicit opt-in consent. Marketing communications are not pre-selected — you must actively choose to receive them.

General mailing list

If you opt in to our mailing list, we may send you promotional offers, event invitations, newsletters, and updates about our products and services through Mailchimp, a US-based email marketing platform operated by Intuit Inc. (see Section 8 for overseas transfer details).

Amato's Rewards communications

If you are an Amato's Rewards member, we may also send you rewards-related communications, including points balance updates, birthday offers, and member-exclusive promotions. Transactional rewards notifications (such as points earned or redeemed confirmations) may be sent regardless of your promotional communication preferences.

Opting out

You can withdraw your consent and opt out at any time by:

• clicking the unsubscribe link included in every marketing email; or
• emailing us at amatos@amatos.com.au.

We will action opt-out requests promptly and free of charge.

10. How we keep your information safe

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:

• using HTTPS to encrypt data in transit between your browser and our servers;
• ensuring all card payments are processed through Stripe, which is PCI DSS compliant — card numbers and payment card details are never stored on our systems;
• not retaining order information in your browser beyond the checkout process;
• restricting access to records to authorised staff only via password-protected administration pages; and
• storing data on secure servers with appropriate access controls.

11. How long we keep your information

We keep personal information only for as long as it is needed for the purposes for which it was collected, and as required by law.

When data is no longer required, we will destroy or de-identify the personal information within a reasonable timeframe.

Event booking data

If you make an event booking, we retain your booking information (including guest names, dietary preferences, and payment status) for the duration needed to administer the event and process any outstanding payments or refunds. If your order is cancelled — whether by you or by us due to non-payment — we retain the booking record for a reasonable period to meet our legal, financial, and record-keeping obligations before destroying or de-identifying it.

If you earn entries in a prize draw associated with your event booking, we retain the draw entry record as part of your booking information until the draw is completed, the prize is claimed, and any redraw period has passed.

Amato's Rewards data

If you are an Amato's Rewards member, we retain your membership information (including date of birth, purchase history, and points balance) for as long as your membership remains active. If you close your account or your membership is terminated, we will retain your information for a reasonable period to meet our legal and record-keeping obligations before destroying or de-identifying it.

12. Your rights - access and correction

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, or misleading.

To make a request:

• Email amatos@amatos.com.au with the subject line "Privacy - Access Request" or "Privacy - Correction Request".
• We will respond within 30 calendar days.
• Access and correction are provided free of charge.

If we are unable to grant your request (for example, because it would unreasonably affect another person's privacy), we will write to you to explain our decision and your options.

13. Complaints

If you believe we have not handled your personal information in accordance with this policy or the Australian Privacy Principles, you can lodge a complaint.

How to make a complaint

Email amatos@amatos.com.au with the subject line "Privacy Complaint".

How we handle complaints

• We will acknowledge your complaint in writing.
• We will investigate the matter, including gathering relevant facts and reviewing relevant records.
• We will provide you with a written response, including our findings and any steps we will take to resolve the issue.
• In most cases, we will respond within 30 calendar days. If we need more time, we will let you know and agree a revised timeframe.

If you are not satisfied

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au
• Website: www.oaic.gov.au
• Complaints form: oaic.gov.au/privacy/privacy-complaints

14. How to contact us

For privacy enquiries, access or correction requests, or complaints:

15. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, services, or legal obligations. When we make changes, we will update the "Last updated" date at the top of this page.

You can always find the most up-to-date version of this policy on our website.